The Quarterly Threat Landscape Report is out. See what attackers are targeting now.Read report

Vulnerability & Exploit Database

Rapid7’s curated database of vulnerabilities, featuring exploit modules and check methods integrated into the Metasploit Framework.

Emergent Threat6
TitleEitWModules
CVE-2026-57716: Improper Limitation of a Pathname to a Restricted Directory5.3 MediumN/A0%Jul 23, 2026
CVE-2026-57704: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 23, 2026
CVE-2026-57703: Missing Authorization6.3 MediumN/A0%Jul 23, 2026
CVE-2026-57701: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 23, 2026
CVE-2026-57699: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 23, 2026
CVE-2026-57696: Improper Limitation of a Pathname to a Restricted Directory7.1 HighN/A0%Jul 23, 2026
CVE-2026-57626: Cross-Site Request Forgery (CSRF)7.1 HighN/A0%Jul 23, 2026
CVE-2026-57428: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 23, 2026
CVE-2026-57427: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 23, 2026
CVE-2026-57425: Missing Authorization6.5 MediumN/A0%Jul 23, 2026
CVE-2026-57397: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 23, 2026
CVE-2026-57384: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Jul 23, 2026
CVE-2026-57374: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 23, 2026
CVE-2026-57373: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Jul 23, 2026
CVE-2026-57370: Improper Neutralization of Input During Web Page Generation7.1 HighN/A0%Jul 23, 2026
CVE-2026-57367: Missing Authorization7.1 HighN/A0%Jul 23, 2026
CVE-2026-27423: Missing Authorization4.3 MediumN/A0%Jul 23, 2026
CVE-2026-27422: Missing Authorization5.3 MediumN/A0%Jul 23, 2026
CVE-2026-27418: Missing Authorization5.3 MediumN/A0%Jul 23, 2026
CVE-2026-27403: Improper Neutralization of Input During Web Page Generation6.5 MediumN/A0%Jul 23, 2026
CVE-2026-27399: Missing Authorization5.3 MediumN/A0%Jul 23, 2026
CVE-2026-27392: Missing Authorization4.3 MediumN/A0%Jul 23, 2026
CVE-2026-27391: Missing Authorization5.4 MediumN/A0%Jul 23, 2026
CVE-2026-27377: Missing Authorization6.7 MediumN/A0%Jul 23, 2026
CVE-2026-27372: Insertion of Sensitive Information Into Sent Data6.5 MediumN/A0%Jul 23, 2026
27251-27275 of 559420